217 matches found
MAL-2025-147165 Malicious code in rehype-css-loader-metalsmith-carina (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2fe2030d45e843d156fa16ca029b0f063d19d50a9ce988cc4c4a0fe0f2d6ac89 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-147984 Malicious code in slides-css-loader-callisto-server (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e15db063ad96961c26caa1aa5ee053211e5e9c88abed26b2e9f9f82a5714bdb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-142862 Malicious code in geckodriver-css-loader-transform-cli (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f64f78d7d77f3e696991adcac5717ada6171d328e0dc9af25c717170d0a10828 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-111630
Malicious code in local-css-loader-ursa-venus npm...
EUVD-2025-111628
Malicious code in local-galaxy-css-loader-chariklo npm...
EUVD-2025-112414
Malicious code in io-hercules-css-loader-sync npm...
EUVD-2025-112197
Malicious code in jekyll-transport-fusion-css-loader npm...
Malicious code in css-loader-octans-acamar-colors (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b5a0eb27ce8f5a2dfcaca555b902c33e0adef4bc2fe29a0608fab6b0b3a2244 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in css-loader-soap-elektra-andromeda (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e02bd7db49f120b636f5d8a86022af64e2403f9c6397fdaa301235a9bca6c2be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in helios-css-loader-kastra-transform (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 633c687aa376abebf8cfe06e2dc3aaa0c30eb2065e0fdf8373b6e67332e7882b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in hercules-server-airbnb-css-loader (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b0d39e51f8d9f7bc15046f50bb2eebff5f7edc6e9d0dba9b05ee803e679f340f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in html-webpack-plugin-sedna-css-loader-nebula (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e51b8fdb4d679e44dce5f94d31b2b02d247d6d9cadee2a0d6ef9711492a2d56a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in jekyll-transport-fusion-css-loader (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90acc8ffa85bac80ebe5f7d7f7ff730194b5d208154fe0f059cf44abad400c98 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in miranda-yonder-css-loader-hercules (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8378467263bcd9a3bd8da17fda30d0ca889e2cdb63213a7c5b17da5e8173b472 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in triton-scripts-cygnus-css-loader (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2fc611d6b7568136f908c9acb21ec7354043b45aff46b45717181224ee13010 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-113435
Malicious code in framework-css-loader-enceladus-chai npm...
EUVD-2025-113349
Malicious code in gacrux-dagda-koa-css-loader npm...
EUVD-2025-113021
Malicious code in grus-css-loader-ophiuchus-scripts npm...